This course provides a practical foundation in administering CyberArk Identity to secure workforce access to enterprise applications. It covers tenant administration, directory integration, user and role management, single sign-on (SSO), multifactor authentication (MFA), adaptive access policies, and application provisioning. Participants also explore monitoring, troubleshooting, and common identity administration tasks.
The course supports preparation for CyberArk Defender Access (ACC-DEF). CyberArk University now labels its related study guide Defender – IAM (previously called Defender – Access).
Duration 3 Days – 21 hrs.
Objectives
- Explain CyberArk Identity capabilities and their role in identity security and Zero Trust.
- Configure core tenant settings and administrative permissions.
- Manage users, groups, roles, and application access.
- Describe directory integration requirements and CyberArk Identity Connector functions.
- Configure SSO for enterprise applications using supported integration methods.
- Implement MFA and context-based authentication policies.
- Configure application provisioning and manage user lifecycle activities.
- Use reports and activity records to investigate access issues.
- Troubleshoot common authentication, application access, and provisioning problems.
- Apply these capabilities to an integrated workforce access scenario.
Target Audience
- Identity and access management administrators.
- Cybersecurity administrators and security engineers.
- System administrators responsible for workforce identity and application access.
- IT support personnel handling authentication and access issues.
- Application administrators integrating applications with CyberArk Identity.
- IT professionals preparing for CyberArk Defender Access certification.
Prerequisites
- Basic understanding of identity and access management concepts.
- Familiarity with users, groups, roles, and access permissions.
- Basic knowledge of Active Directory or LDAP directories.
- Understanding of networking fundamentals, including DNS, HTTPS, and connectivity.
- General awareness of SSO, MFA, and cloud applications.
- Familiarity with Windows administration and browser-based management portals.
- Access to a suitable CyberArk Identity training tenant and sample applications for configuration activities.
Course Outline
Day 1: Identity Foundations and Core Administration
Module 1: Identity Security and CyberArk Identity Overview
- Workforce identity threats and common access challenges.
- Zero Trust and least-privilege principles.
- CyberArk Identity capabilities and core components.
- Administrative and end-user portal functions.
- Authentication, authorization, federation, and provisioning concepts.
Module 2: Tenant Configuration and Administration
- Navigating the administration portal.
- Configuring core tenant settings.
- Tenant branding and user-facing settings.
- Administrative roles and delegated permissions.
- Managing administrative access securely.
Module 3: Directory Integration and Identity Sources
- Cloud directory and external directory concepts.
- CyberArk Identity Connector purpose and deployment considerations.
- Active Directory integration fundamentals.
- Directory connectivity and identity lookup.
- Common directory integration issues.
Module 4: User, Group, and Role Administration
- Creating and managing users.
- Organizing groups and roles.
- Assigning administrative permissions and application access.
- Managing role membership.
- Account status, password management, and user support tasks.
Day 2: Single Sign-On and Authentication Policies
Module 5: Application Integration and Single Sign-On
- Application catalog and custom application configuration.
- SAML and OpenID Connect fundamentals.
- Identity provider and service provider relationships.
- Application metadata, certificates, and attribute mappings.
- Application assignment and user access.
- Common SSO configuration issues.
Module 6: Multifactor Authentication
- Authentication factors and enrollment.
- Authentication profiles and challenges.
- MFA requirements for users and administrators.
- Authentication policy configuration.
- Enrollment recovery and lost-factor support.
- Balancing access security and usability.
Module 7: Adaptive Access and Session Controls
- Context-based access decisions.
- Policy conditions, including network, location, and device context.
- Step-up authentication.
- Policy priority and scope.
- Session settings and reauthentication requirements.
- Investigating unexpected policy behavior.
Day 3: Lifecycle Management, Operations, and Capstone
Module 8: User Lifecycle and Application Provisioning
- User onboarding, role changes, and offboarding.
- Provisioning and deprovisioning concepts.
- SCIM fundamentals.
- Attribute mapping and application account matching.
- Provisioning scope and synchronization behavior.
- Common provisioning errors and corrective actions.
Module 9: Monitoring, Reporting, and Troubleshooting
- Reviewing authentication activity and administrative changes.
- Using available reports and activity records.
- Investigating failed sign-ins and application access problems.
- Troubleshooting directory connectivity and MFA issues.
- Diagnosing provisioning failures.
- Maintaining configuration records and escalation information.
Module 10: Capstone — Secure Workforce Application Access
- Configure access for a sample organization with multiple departments.
- Create users and roles with appropriate permissions.
- Integrate a sample application with SSO.
- Apply MFA and context-based authentication policies.
- Configure provisioning for a supported application.
- Confirm onboarding, access changes, and offboarding behavior.
- Resolve selected access issues and document the final configuration.

